RM Unify - How to 'lock out' RM Unify accounts and prevent users from logging in
Published Date : 14 Aug 2013
Last Updated : 11 Nov 2024
Content Ref: TEC3445297
Operating System
(none)
Part No
(none)
Summary
Describes methods of locking RM Unify accounts and preventing the users from logging in.
Symptoms
You may need to stop an RM Unify user from logging in - for example if they have been incorrectly matched to the wrong Microsoft® 365™ account/mailbox, or they are the subject of a disciplinary procedure, security incident etc.
Procedure
User was provisioned using AD Sync
Either:
Remove the user from the RM Unify Users Active Directory (AD) group to disable the account in RM Unify.
Disable the user's network account in AD (or in the CC4 RM Management Console ((RMMC)).
Change the user's password in AD (or in the CC4 RMMC).
As an RM Unify admin, log on to the Management Console, locate the user, click Actions and from the drop-down menu, select 'Disable* user'.
User was provisioned via CSV, MIS Sync, or manually
As an RM Unify admin, change the user's password in the RM Unify Management Console.
As an RM Unify admin, log on to the Management Console, locate the user, click Actions and from the drop-down menu, select 'Disable* user'.
Preventing access to Microsoft 365 accounts
Disabling a user in RM Unify or changing their password will prevent access to Microsoft 365 via the Launch Pad tiles.
Access to Microsoft 365 services and resources (including the Microsoft 365 desktop apps, or other mobile/device apps configured with a Microsoft 365 account) will typically be revoked within a couple of minutes. Users of the web apps will see the following message:
For desktop apps and other mobile/device apps, the user may see "Access is denied" messages. They may also see a prompt requesting that they sign in again with their Microsoft 365 account credentials (which will fail due to the RM Unify account being disabled).
To prevent a user continuing to access their Microsoft 365 account entirely, a Microsoft 365 administrator can remove selected, or all licences (Exchange Online for email, SharePoint Online for OneDrive, etc.) from that account. Please be aware that an unlicensed Microsoft 365 account will have all its data (email, OneDrive, etc.) permanently deleted after 30 days as per the default Microsoft behaviour. Unlicensing of Microsoft 365 accounts this way happens automatically when the RM Unify account is deleted.
Possible Issues
Please note that if a user is currently logged on to RM Unify and Microsoft 365, following the disabling of their account or changing their password, their current page (e.g. Launch Pad) may continue to be displayed. However, once they navigate away from that page, try to perform a restricted action, or if they log out, or their current session times out, they will receive either the "Unrecognised user" message, or if trying to log on: "Sorry but your account has been disabled. If you would like your account to be enabled, please contact your establishment's RM Unify administrator."
If this article has not helped provide a solution then it is also possible to
log a call...